users who have used steam should be familiar with this problem. Steam tokens are equivalent to secondary authentication. When you log in to an unfamiliar device or make a transaction, you need to enter the verification code in the token for secondary verification.
what I am curious about is that even if the app is not connected to the Internet, the CAPTCHA on the mobile token is connected to the server Synchronize, that is, if the user is disconnected from the phone"s network, entering the CAPTCHA on the token can still achieve the effect of secondary verification.
I have not come into contact with this knowledge. I would like to know about it. I hope the gods can provide some ideas.